Questions tagged [azure-application-registration]

2 questions
1
vote
1 answer

Custom Azure AD Role or Azure Policy to allow only Microsoft Graph User.Read.All permission to Azure Service Prinicpal

Use Case - Automate assigning Microsoft Graphs's User.Read.All permission to App Registration/Service Principal using DevOps pipeline. So that applications can read user profiles. Challenge To grant Microsoft Graphs's User.Read.All permission,…
0
votes
1 answer

Azure User Impersonation does not work when User/Assignment enable on the Backend App Registration

I have two application registrations: one for the backend and one for the frontend. On the backend App Reg, I have defined (exposed) a scope called User_impersonation like the following: On the frontend App Reg, I have added the permissions…